Privacy Policy

Native AI Techlabs ("NAT", "we", "our", or "us") operates the AUTHOS Visitor Management System platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Please read this policy carefully. By accessing or using AUTHOS you agree to the collection and use of information described herein.

1. Information We Collect

We collect information in the following ways:

• Account & Demo Request Data — When you submit a demo request or sign up, we collect your name, email address, phone number, company name, job title, and industry.
• Visitor Data (platform use) — When your organisation uses AUTHOS, we process visitor identity data (name, mobile number, purpose of visit) on your behalf as a data processor.
• Usage Data — We automatically collect information about how you interact with our services: IP address, browser type, referring URLs, pages visited, and timestamps.
• Cookies & Tracking — See our Cookie Policy for details.

2. How We Use Your Information

• To provide, operate, and maintain our services.
• To process and respond to demo requests.
• To send transactional emails (OTPs, access passes, approval notifications) on behalf of your organisation.
• To analyse usage patterns and improve the platform.
• To comply with applicable laws and legal obligations.
• To prevent fraudulent activity and enforce our Terms of Service.

3. Legal Basis for Processing (GDPR)

Where applicable, we process personal data under the following legal bases:

• Contractual necessity — to perform the services you requested.
• Legitimate interests — to operate and improve our platform and prevent fraud.
• Consent — for marketing communications (you may withdraw at any time).
• Legal obligation — to comply with applicable laws.

4. Data Sharing & Disclosure

We do not sell your personal data. We may share it only as follows:

• Service Providers — Cloud hosting, email delivery, analytics, and payment processors that operate under confidentiality and data processing agreements with us.
• Your Organisation — Visitor data is shared with the relevant host employees and security staff as part of the approval workflow.
• Legal Requirements — When required by law, court order, or government authority.
• Business Transfers — In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Visitor records are retained for a minimum of 90 days (or as configured by your organisation's administrator) to satisfy audit requirements. Demo request data is retained for up to 24 months.

6. Security

We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, access controls, and an immutable audit log. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict our processing of your data.
• Data portability — receive a copy of your data in a structured format.
• Withdraw consent at any time where processing is consent-based.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at privacy@thenatlabs.com.

8. International Transfers

AUTHOS is operated from India. If you access the platform from outside India, your data may be transferred to and processed in India. We take appropriate safeguards (including standard contractual clauses where applicable) to protect your data during such transfers.

9. Children's Privacy

AUTHOS is intended for business use only and is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our services after any change constitutes your acceptance of the new policy.